           (let [channel (.getChannel (RandomAccessFile. f "rw"))]
             (try
               (let [lock (.lock channel 0 Long/MAX_VALUE false)]
+                (println "Lock acquired")
                 (log/info "Lock acquired")
                 (try
                   (let [nonce-counter (io/file path "noncecounter")]

  ;; just going to use the built-in AES encryption
  [^SecretKey secret-key
   ^bytes clear-text]
  ;; Q: Which cipher mode is appropriate here?
  (let [cipher (Cipher/getInstance "AES/CBC/PKCS5Padding")
        ;; FIXME: Read https://www.synopsys.com/blogs/software-security/proper-use-of-javas-securerandom/

    :as this}
   key-dir
   long-term?]
  (println "Reloading nonce")
  (log/debug "Reloading nonce")
  (let [raw-path (str key-dir "/.expertsonly/")
        path (io/resource raw-path)]
    (let [f (io/file path "lock")]
